<html><body>
<p><tt>Roland Dreier <rdreier@cisco.com> wrote on 02/16/2007 10:10:55 AM:<br>
<br>
> > > But what if the full-member join fails on node A for node A's<br>
> > > solicited node group, but then node B succeeds in joining that group<br>
> > > as a send-only member (perhaps because some other nodes have dropped<br>
> > > off the fabric in the meantime). Then node B will send the ND message<br>
> > > on a MCG that A is not a member of.<br>
> <br>
> > Yes. B can send ND to A, and A responds without being a member so IPv6 ND<br>
> > works. Is there any security or other problems here?<br>
> <br>
> Node A is not a member of the group B is sending on, so SM does not<br>
> have to set up any routes for the messages to even reach node A. So<br>
> it doesn't see the messages and doesn't respond to ND.<br>
> <br>
> - R.<br>
</tt><br>
<tt>Two MCGs groups must be establised before IPoIB link up, one is broadcast for IPv4, one is all hosts multicast for IPv6. So </tt>Node A is a member of all hosts address, the patch directs ND sends to all hosts, so node A responses it.<br>
<br>
Thanks<br>
Shirley Ma<br>
<br>
<br>
<br>
</body></html>